# Bulk Add to Block List

> Block up to 1,000 emails or domains in one call.

<Note>
  **Beta.** This endpoint is not in production yet and may change before it ships.
</Note>

Requires an API key with the `write` scope.

Values already on the list count as duplicates, not errors. Invalid values are reported and the rest are still added.

## Body Parameters

<ParamField body="values" type="string[]">Emails or domains. Up to 1,000 across `values` and `text`.</ParamField>
<ParamField body="text" type="string">Pasted text; split on whitespace, commas and semicolons.</ParamField>
<ParamField body="note" type="string">Optional note stored on every new entry.</ParamField>

## Response

<ResponseField name="data" type="object">
  <Expandable title="data">
    <ResponseField name="created" type="integer">New entries added.</ResponseField>
    <ResponseField name="duplicates" type="integer">Already listed, or repeated in the request.</ResponseField>
    <ResponseField name="invalid" type="integer">Values that are not a valid email or domain.</ResponseField>
    <ResponseField name="invalidDetails" type="array">First 100 invalid values, each with `value` and `reason`.</ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
```bash cURL
curl -X POST "https://api.foxreach.io/api/v1/block-list/bulk" \
  -H "X-API-Key: otr_your_key" \
  -H "Content-Type: application/json" \
  -d '{"values": ["jane@acme.com", "competitor.com", "nope"]}'
```

```python Python SDK (beta)
from foxreach import FoxReach

client = FoxReach(api_key="otr_your_key")
result = client.block_list.bulk_add(["jane@acme.com", "competitor.com"])
```

```typescript TypeScript SDK (beta)
import { FoxReach } from "foxreach";

const client = new FoxReach({ apiKey: "otr_your_key" });
const result = await client.blockList.bulkAdd({ values: ["jane@acme.com", "competitor.com"] });
```
</RequestExample>

<ResponseExample>
```json
{
  "data": {
    "created": 2,
    "duplicates": 0,
    "invalid": 1,
    "invalidDetails": [{ "value": "nope", "reason": "Not a valid email or domain" }]
  }
}
```
</ResponseExample>

## Errors

| Status | Description |
|--------|-------------|
| `401` | Missing, invalid, revoked or expired API key |
| `403` | API key does not have the required scope: `write` |
| `422` | No values, or more than 1,000 |

## Rate Limit

- **100 requests per minute, shared by every `bulk` call in your workspace.** Fixed 60-second window.
- Every response includes `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` (unix epoch seconds) and `X-RateLimit-Bucket` (`bulk`).
- A `429` response includes a `Retry-After` header (seconds until the bucket resets).

For client-side patterns, see [Rate Limiting](/rate-limiting).